HP CIFS Server Administrator Guide Version A.03.01.03 (5900-2006, October 2011)
Table Of Contents
- HP CIFS Server Administrator Guide Version A.03.01.03
- Contents
- About this document
- 1 Introduction to the HP CIFS Server
- 2 Installing and configuring HP CIFS Server
- HP CIFS Server requirements and limitations
- Step 1: Installing HP CIFS Server software
- Step 2: Running the configuration script
- Step 3: Modify the configuration
- Step 4: Starting HP CIFS Server
- Other Samba configuration issues
- 3 Managing HP-UX file access permissions from Windows NT/XP/2000/Vista/Windows 7
- Introduction
- UNIX file permissions and POSIX ACLs
- Using the Windows NT Explorer GUI to create ACLs
- Using the Windows Vista Explorer GUI to create ACLs
- POSIX ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- HP CIFS Server Directory ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- In conclusion
- 4 Windows style domains
- Introduction
- Configure HP CIFS Server as a PDC
- Configure HP CIFS Server as a BDC
- Domain member server
- Create the Machine Trust Accounts
- Configure domain users
- Join a Windows client to a Samba domain
- Roaming profiles
- Configuring user logon scripts
- Home drive mapping support
- Trust relationships
- 5 Windows 2003 and Windows 2008 domains
- 6 LDAP integration support
- Overview
- Network environments
- Summary of installing and configuring
- Installing and configuring your Directory Server
- Installing LDAP-UX Client Services on an HP CIFS Server
- Configuring the LDAP-UX Client Services
- Enabling Secure Sockets Layer (SSL)
- Extending the Samba subschema into your Directory Server
- Migrating your data to the Directory Server
- Configuring the HP CIFS Server
- Creating Samba users in directory
- Management tools
- 7 Winbind support
- 8 Kerberos support
- 9 HP CIFS deployment models
- Introduction
- Samba Domain Model
- Windows Domain Model
- Unified Domain Model
- 10 Securing HP CIFS Server
- 11 Configuring HA HP CIFS
- 12 HP-UX configuration for HP CIFS
- 13 Tool reference
- Glossary
- Index
Establishing a trust relationship on an HP CIFS PDC with an NT domain
Trusting an NT domain from a Samba domain
Use the following steps to trust an NT domain from a Samba domain:
1. On the NT domain controller, run the User Manager utility. Go to policies/trust relationship,
add the trusting Samba domain account for CIFS Server and establish a password.
2. Log on as root on the trusting Samba domain PDC. Run net rpc trustdom to establish
the trust and type the password that was created with the User Manager utility on the trusted
NT Domain PDC.
$ net rpc trustdom establish <trusted domain name>
Trusting a Samba domain from an NT domain
Log on as root and execute the following steps on the trusted Samba domain PDC:
1. Add a trust account for the trusting NT domain to /etc/passwd. Add the domain name with
the "$" using the useradd command as follows:
$ useradd <trusting NT domain name>$
Due to the name length limitation of the useradd command, you may need to edit
/etc/passwd to add the trusting NT domain name account.
2. Run smbpasswd to add a trusting NT domain Samba account to your trusted Samba domain
backend database and create a password for the trusting account. This password is used by
the trusting NT domain when it establishes the trust relationship.
$ smbpasswd -a -i <trusting domain name>
3. On the NT domain controller, run the User Manager utility. Go to policies/trust relationship.
Add the trusted Samba domain account for CIFS Server and type a password established by
the smbpasswd command on the Samba Domain PDC.
Establishing a trust relationship on an HP CIFS member server of a Samba domain
or an NT domain
HP CIFS member servers of an NT domain will automatically respect the trust relationships
established by their domain controllers. No extra configuration is required.
Trust relationships 67